Lucene search
+L

23329 matches found

NVD
NVD
added 2025/04/06 8:15 p.m.18 views

CVE-2025-31488

Plain Craft Launcher PCL is a launcher for Minecraft. PCL allows users to use homepages provided by third parties. If controls such as WebBrowser are used in the homepage, WPF will use Internet Explorer to load the specified webpage. If the user uses a malicious homepage, the attacker can use IE...

4.9CVSS0.00173EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/06 7:56 p.m.10 views

CVE-2025-31488 Plain Craft Launcher's custom homepage can use Internet Explorer to load web pages with the help of controls such as WebBrowser

Plain Craft Launcher PCL is a launcher for Minecraft. PCL allows users to use homepages provided by third parties. If controls such as WebBrowser are used in the homepage, WPF will use Internet Explorer to load the specified webpage. If the user uses a malicious homepage, the attacker can use IE...

4.9CVSS6.6AI score0.00173EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/06 7:56 p.m.64 views

CVE-2025-31488

Plain Craft Launcher (PCL) is affected. When a homepage uses WebBrowser controls in its WPF UI, the app loads the page via Internet Explorer in the background, allowing an attacker with a malicious homepage to access the target webpage without user awareness. The issue is fixed in version 2.9.3.

4.9CVSS6.3AI score0.00173EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/06 7:56 p.m.17 views

CVE-2025-31488 Plain Craft Launcher's custom homepage can use Internet Explorer to load web pages with the help of controls such as WebBrowser

Plain Craft Launcher PCL is a launcher for Minecraft. PCL allows users to use homepages provided by third parties. If controls such as WebBrowser are used in the homepage, WPF will use Internet Explorer to load the specified webpage. If the user uses a malicious homepage, the attacker can use IE...

4.9CVSS0.00173EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/06 7:56 p.m.7 views

CVE-2025-31488 Plain Craft Launcher's custom homepage can use Internet Explorer to load web pages with the help of controls such as WebBrowser

Plain Craft Launcher PCL is a launcher for Minecraft. PCL allows users to use homepages provided by third parties. If controls such as WebBrowser are used in the homepage, WPF will use Internet Explorer to load the specified webpage. If the user uses a malicious homepage, the attacker can use IE...

4.9CVSS6.7AI score0.00173EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/06 12:0 a.m.5 views

Plain Craft Launcher 输入验证错误漏洞

Plain Craft Launcher is an open source software by Hex Dragon. Plain Craft Launcher suffers from an input validation error vulnerability that stems from a malicious homepage that may use IE to access web pages in the background...

4.9CVSS6.7AI score0.00173EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2025/03/11 7:0 a.m.50 views

KB5053593: Cumulative security update for Internet Explorer: March 11, 2025

None None...

4.3CVSS6.7AI score0.02983EPSS
SaveExploits0
Patchstack
Patchstack
added 2025/02/14 1:0 p.m.7 views

WordPress IE CSS3 Support Plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin IE CSS3 Support versions = 2.0.1...

7.1CVSS6.1AI score0.00294EPSS
SaveExploits0Affected Software1
Microsoft KB
Microsoft KB
added 2025/02/11 8:0 a.m.64 views

KB5051972: Cumulative security update for Internet Explorer: February 11, 2025

None None...

6.5CVSS6.9AI score0.24457EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2025/02/04 12:0 a.m.11 views

Microsoft Edge ms-its: Scheme Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file while in Internet Explorer mode. The specific flaw...

7.5CVSS7.3AI score
SaveExploits0References1
CNVD
CNVD
added 2025/01/17 12:0 a.m.30 views

Microsoft Internet Explorer Code Execution Vulnerability

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A code execution vulnerability exists in Microsoft Internet Explorer due to a flaw in the Internet Explorer component. An attacker could exploit the vulnerability to...

7.8CVSS7.9AI score0.0129EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/16 6:41 p.m.5 views

WordPress Shockingly Big IE6 Warning plugin <= 1.6.3 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Shockingly Big IE6 Warning versions = 1.6.3...

7.1CVSS6.2AI score0.00199EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/16 12:0 a.m.6 views

PT-2025-4881 · Unknown · Shockingly Big Ie6 Warning

Name of the Vulnerable Software and Affected Versions: Shockingly Big IE6 Warning versions n/a through 1.6.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

7.1CVSS9.3AI score0.00199EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/16 12:0 a.m.4 views

WordPress plugin Shockingly Big IE6 Warning 跨站请求伪造漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin Shockingly Big A cross-site request forgery vulnerability exists in...

7.1CVSS8.2AI score0.00199EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/14 6:15 p.m.1 views

CVE-2025-21326

Internet Explorer Remote Code Execution Vulnerability...

7.8CVSS7.4AI score0.0129EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/14 6:15 p.m.11 views

CVE-2025-21326

Internet Explorer Remote Code Execution Vulnerability...

7.8CVSS0.0129EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/14 6:4 p.m.8 views

CVE-2025-21326 Internet Explorer Remote Code Execution Vulnerability

...

7.8CVSS7.6AI score0.0129EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/14 6:4 p.m.22 views

CVE-2025-21326 Internet Explorer Remote Code Execution Vulnerability

...

7.8CVSS0.0129EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/14 6:4 p.m.97 views

CVE-2025-21326

Technical details for CVE-2025-21326 are not publicly provided in the supplied documents. Monitor for updates from Microsoft MSRC and regional advisories; current sources mention Internet Explorer RCE and related KB updates without detailing exploit vectors.

7.8CVSS7.9AI score0.0129EPSS
SaveExploits0References1Affected Software2
Microsoft KB
Microsoft KB
added 2025/01/14 8:0 a.m.51 views

KB5049994: Cumulative security update for Internet Explorer: January 14, 2025

None None...

8.8CVSS6.3AI score0.04504EPSS
SaveExploits0
Rows per page
Query Builder